Mars · Report #2313478
CSRF resulting in adding pet at ███████
Validstatus
lowseverity
29upvotes
25 Jun 2024disclosed
Summary
An insufficient validation of user-supplied input in the application occurred, allowing a Cross-Site Request Forgery (CSRF) vulnerability. The attacker can forge requests from an external website to add pets to the victim's account on █████████, provided the attacker knows the victim's account ID.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.